安全工具

Passwords, passphrases, API keys, JWT decoding, checksums and anonymization.

Strong 密碼產生器Crypto-random passwords with full policy control.密碼短語產生器Diceware-style memorable passphrases.密碼 Strength 測試器Estimate entropy and crack-time of a password.API Key 產生器Random hex / Base64 secrets of any length.基礎 Auth Header 產生器Build and decode Authorization: Basic headers.JWT 解碼器Inspect JWT header, payload and signature metadata.檢查碼驗證器Compare a file hash against the published digest.Secret 掃描器Find leaked API keys, tokens, private keys, JWTs and connection strings in config files, logs or code.PII 去識別化工具Mask emails, phone numbers, SSNs, card numbers, IPs, IBANs, MACs and JWTs in logs before sharing them.TOTP Code 產生器Generate RFC 6238 time-based one-time passwords from a Base32 secret, with the otpauth URI.JWT 簽章驗證器Decode a JWT and verify its HS256 signature locally, with exp/nbf/iat claim checks.EXIFRemoverRemove EXIF, GPS location, camera info, IPTC and comments from JPG, PNG and WebP photos in one batch — every cleaned file is re-parsed in your browser to prove zero metadata remains, and your photos are never uploaded.JWT 產生器Sign and verify JSON Web Tokens entirely in your browser — HS256, HS384, HS512, RS256 and ES256 run on your own WebCrypto, fresh RSA-2048/EC P-256 pairs export as PKCS#8 and SPKI PEM, exp/iat come back as human dates, and the unsigned "none" algorithm is refused by design. Nothing is uploaded.JWTSignerSeal a payload with RS256 (or HS256/HS384/HS512 and ES256) right in the browser: paste claims and a PKCS#8 private key — or generate an RSA/EC pair on the spot — then verify the result on the same page. "none" is never accepted, and your keys never leave this machine.ToBech32Bech32 is an encoding scheme primarily used for Bitcoin SegWit addresses (BIP-0173). It uses a 32-character alphabet that excludes easily confused characters (1, b, i, o) and includes a checksum for error detection. Bech32m (BIP-0350) is an